Security – Domain Users, make sure Enrol and Auto-Enrol are enabled General – Publish in Active Directory = ON
Security - Add Domain Computers, add auto-enroll and enroll permissions Security - RAS and IAS Servers, add auto-enroll permission Security - Remove your personal account from the ACL General - Publish in Active Directory = ON
Settings – Remove all but “Strongest encryption”Įnable policy and bring processing order above existing policyĭuplicate the "RAS and IAS Server" template
I spent a couple of day tidying up this process, so hopefully it helps some of you out and saves you some time.Ĭonditions - Modify security group specified for testingĬonstraints - Disable all "Less secure authentication methods" checkboxesĬonstraints - Change EAP type to Smart Card
0 kommentar(er)
